Privacy notice
Your data in the Shield demo
Last updated 23 October 2026
This notice covers the live identity verification demo on shield.alef10.ai. Alef10 runs the demo and decides how the data in it is used. The demo makes no decision about you; it shows you what Shield checks.
What is collected
Only if you start a verification:
- Photos of the identity document you show, and the data read from them, such as name, date of birth, document number and expiry date.
- A selfie.
- The results of the checks: document authenticity, liveness, the face match score and the final decision.
Face images and the face comparison are biometric data. They are used only to run this verification.
To stop the demo being used to run up costs, Alef10 counts how many verifications are started from each connection. It stores a keyed, one-way hash of your IP address with that count, never the address itself. The count resets every hour and every day, and each count is deleted automatically shortly after its hour or day ends.
How it works
The capture screens are Shield's own page. Your photos are resized on your device, then sent to Alef10's server, which passes them to the verification provider below and returns the result to your page. Alef10's server does not write them anywhere: they are in its memory only for the seconds the check takes.
Who processes it
The checks are carried out by Didit (Didit Identity Spain, S.L. and Didit Identity, Inc.), Shield's verification technology provider, acting as a processor on Alef10's behalf and on Alef10's instructions, only to run the verification you asked for.
Didit may also process limited data as an independent controller, for security, abuse prevention, legal compliance, audit logging and legal claims. How Didit handles verification data, and your rights with Didit, are set out in its Verification Privacy Notice. Using the verification is subject to Didit's End User Terms for Identity Verification. You can contact Didit's privacy team at privacy@didit.me.
Your consent
Nothing is captured or sent until you tick the consent box and press Start verification. Face images and the face comparison are biometric data, and your consent is the basis for processing them. You can stop at any point before the result by pressing Cancel or leaving the page.
How long it is kept
The demo asks Didit to run every check without saving it. With that setting Didit stores no verification session and no image, and does not add your face to any face search index. Your face is still compared with the application's blocklist, as every check is. Alef10 keeps nothing either. Your result exists only in the page in your browser, and is gone when you reload it, start again or close it.
Because nothing is stored, there is no session to delete afterwards. If you want to ask about a verification you ran, write to john@alef10.ai with the date and time.
You do not have to use your own ID
A specimen document works for trying the demo. Expect the authenticity checks to flag it.
Your rights and contact
You can ask what we hold about you, ask for it to be corrected or erased, or object to its use, by writing to john@alef10.ai. Requests sent to Didit about this demo may be forwarded to Alef10, which is the right first contact. You can also complain to your local data protection authority.